Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft
File:                     B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft (raw, json)
Hash identifier:          XZbkybeo87wvgQLaqjQBShrMSLlhc5ZSYSc8ypks9S8=
Subject key identifier:   57:94:67:F7:07:5C:50:C5:8F:6C:44:21:0C:A0:B2:E4:62:26:CD:E3
Authority key identifier: B0:FD:73:1B:6E:9F:78:84:AE:26:EF:E4:39:3D:EA:16:67:EF:B5:18
Certificate issuer:       /CN=b0fd731b6e9f7884ae26efe4393dea1667efb518
Certificate serial:       0C1DC19A7BB480CB5C99E89740E2491CEECE3F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sP1zG26feISuJu_kOT3qFmfvtRg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft
Manifest number:          6F
Signing time:             Sat 28 Mar 2026 17:30:44 +0000
Manifest this update:     Sat 28 Mar 2026 17:25:44 +0000
Manifest next update:     Sun 29 Mar 2026 20:05:44 +0000
Files and hashes:         1: B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.crl (hash: saZ473prAZpy1DDx/7KYvV0NwVHjkXSG2ExGeinnFB0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sP1zG26feISuJu_kOT3qFmfvtRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 20:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1d:c1:9a:7b:b4:80:cb:5c:99:e8:97:40:e2:49:1c:ee:ce:3f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0fd731b6e9f7884ae26efe4393dea1667efb518
        Validity
            Not Before: Mar 28 17:25:44 2026 GMT
            Not After : Mar 29 20:05:44 2026 GMT
        Subject: CN=579467F7075C50C58F6C44210CA0B2E46226CDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:73:69:92:32:cb:80:fc:91:7c:72:7d:86:
                    d4:ce:5d:06:42:8b:14:5e:09:73:4f:ac:47:12:1b:
                    b8:b7:da:92:00:42:79:18:b5:29:57:70:e2:01:8b:
                    e6:16:b3:d7:f3:74:ae:70:b7:4d:4c:2a:e3:ec:bc:
                    c3:7c:a8:b0:78:29:e5:58:b4:cf:71:c3:4b:68:e9:
                    a5:28:31:b5:3c:67:4c:f1:3e:4b:80:3c:21:41:8f:
                    41:0e:91:7f:b1:2e:f7:35:7d:13:7c:a8:73:8f:68:
                    95:4f:3b:37:15:d2:b2:76:9a:94:03:92:b7:a3:b9:
                    bd:7c:d5:88:09:96:5b:62:ae:fb:1e:41:13:3e:d6:
                    1c:e8:5e:d6:4f:bd:36:cf:fa:f9:01:5a:09:ab:32:
                    cc:b0:2a:d3:2e:19:a0:4a:2f:3a:06:3e:a5:18:39:
                    52:d7:c6:c0:b7:c2:19:fa:46:68:1f:39:e3:6f:9a:
                    44:01:b8:7c:28:1a:15:4e:20:35:69:aa:c9:9d:b3:
                    7f:40:4b:44:32:58:a2:d9:3f:7a:f8:ad:3d:eb:8f:
                    d6:7c:32:75:2d:a0:f0:da:2b:f0:40:11:49:1a:7e:
                    9f:de:9b:05:c8:3c:6d:2d:3a:a7:f9:95:0a:ea:8c:
                    74:c4:53:ee:ed:76:67:9e:35:ad:ef:99:10:a1:8f:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:67:F7:07:5C:50:C5:8F:6C:44:21:0C:A0:B2:E4:62:26:CD:E3
            X509v3 Authority Key Identifier:
                keyid:B0:FD:73:1B:6E:9F:78:84:AE:26:EF:E4:39:3D:EA:16:67:EF:B5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP1zG26feISuJu_kOT3qFmfvtRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:19:11:12:2e:b1:29:19:41:11:7a:8d:c2:ef:37:28:8b:
         b8:1e:3c:0d:79:43:a7:07:bc:35:ed:cd:2a:7a:2f:5c:f3:43:
         8e:85:71:21:2d:63:d5:70:b7:f1:81:e8:75:f1:5b:d6:f4:17:
         26:ce:2d:71:62:2b:b5:7a:29:3f:54:46:8f:39:c2:6e:4e:d1:
         b7:ba:a1:76:3b:16:36:9c:91:12:5d:43:cc:60:8c:a1:99:ed:
         fb:07:fd:f6:de:26:8d:75:fb:f1:04:cc:0f:b8:ff:9a:68:35:
         7e:fe:97:f9:e7:e2:c6:78:a2:10:26:8f:cc:93:ce:02:9b:03:
         98:42:82:73:db:1a:04:2a:c8:b0:07:89:77:10:1c:cb:1b:70:
         ad:24:08:7d:d3:2e:21:af:46:74:91:5b:7e:47:87:38:e5:d3:
         3b:93:40:60:37:f5:8a:51:f8:6a:79:5f:a8:ea:d7:88:3b:1d:
         cb:c7:03:a5:21:c4:c9:1b:ba:0d:08:5f:8d:1d:59:55:65:54:
         af:cb:20:c6:6e:cb:13:b1:86:82:77:ce:68:f7:c1:68:93:a0:
         71:bf:9f:f7:51:68:4c:c9:d7:0a:b1:e7:92:2a:9b:02:59:3e:
         b3:62:d7:5b:2e:b4:f2:8f:70:3a:97:c9:09:16:f9:93:f1:bc:
         ca:d4:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:23 2026 by rpki-client